Project

General

Profile

Download (5.52 KB) Statistics
| Branch: | Tag: | Revision:

root/lib/cyborghood/mail.rb @ c0979b3e

30406d66 Marc Dequenes
# add Rails load path for Debian, until rails framework is split properly
a051c3cd Marc Dequenes
DEB_RAILS_PATH = "/usr/share/rails" unless Object.constants.include?("DEB_RAILS_PATH")
30406d66 Marc Dequenes
Dir.new(DEB_RAILS_PATH).each do |file|
next if file =~ /^\./
path = File.join(DEB_RAILS_PATH, file, "lib")
$: << path if File.directory?(path)
end

bc4894ce Marc Dequenes
require 'cyborghood/base'
require 'delegate'
require 'tmail'
require 'tmail_extra'
30406d66 Marc Dequenes
require 'action_mailer/quoting'
require 'action_mailer/utils'
275e20ec Marc Dequenes
require 'net/smtp'
bc4894ce Marc Dequenes
# This class handles RFC3156 signed messages, validates them, and extract orders properly.
# Encrypted content are not implemented yet.
c427bfc7 Marc Dequenes
module CyborgHood
class Mail < Delegator
30406d66 Marc Dequenes
include ActionMailer::Quoting
include ActionMailer::Utils

def initialize(msg = nil)
275e20ec Marc Dequenes
@config = Config.instance

30406d66 Marc Dequenes
if msg.nil?
@mail = TMail::Mail.new
7193ea94 Marc Dequenes
set_custom_headers
30406d66 Marc Dequenes
else
# unquote headers and transform into TMail object
@mail = TMail::Mail.parse(TMail::Unquoter.unquote_and_convert_to(msg, "UTF-8"))
end
c427bfc7 Marc Dequenes
end

def __getobj__
@mail
end

def parse
960c259e Marc Dequenes
return parse_signed() if is_pgp_signed?
return parse_encrypted() if is_pgp_encrypted?
{:ok => false, :msg => "mail not RFC3156 compliant"}.to_ostruct
end

09b32d70 Marc Dequenes
def create_reply
tmail_reply = @mail.create_reply
tmail_reply.from_addrs = TMail::Address.parse(@config.mail.from_address || self.to.first)
reply = self.class.new(tmail_reply.to_s)
reply.set_custom_headers
reply
end

def set_custom_headers
@mail['Organization'] = @config.mail.organization
end

def check_headers
@mail.header.keys.each do |h|
@mail[h] = quote_address_if_necessary(@mail[h].to_s, "utf-8")
end
end

def deliver
check_headers

smtp_server = @config.mail.smtp_server || "localhost"
smtp_port = @config.mail.smtp_port || 25
smtp_from = @mail.from_addrs.collect{|a| a.address}.join(", ")
smtp_to = @mail.to_addrs.collect{|a| a.address}
Net::SMTP.start(smtp_server, smtp_port) do |smtp|
#p @mail.to_s
smtp.send_message(@mail.to_s, smtp_from, smtp_to)
end
end

def to_s
@mail.to_s
end

def crypt(fingerprint)
c0979b3e Marc Dequenes
@mail = @mail.create_encrypted(fingerprint)
09b32d70 Marc Dequenes
end

def sign
c0979b3e Marc Dequenes
# we don't check the uid, as their is only one signer
@mail = @mail.create_signed(@config.mail.key_id) do |uid_hint, passphrase_info, prev_was_bad|
09b32d70 Marc Dequenes
@config.mail.key_passphrase
end
end

def sign_and_crypt(fingerprint)
c0979b3e Marc Dequenes
# not using sign_and_crypt(), to avoid repeating code
09b32d70 Marc Dequenes
sign()
crypt(fingerprint)
end

def quoted_printable_body=(txt)
@mail.transfer_encoding = "quoted-printable"
@mail.body = [normalize_new_lines(txt)].pack("M*")
end

private

960c259e Marc Dequenes
def parse_signed
7193ea94 Marc Dequenes
order = {:ok => false, :msg => "mail not formatted correctly"}

09b32d70 Marc Dequenes
sigs_check = verify_pgp_signature()
return order.to_ostruct if sigs_check.nil? or sigs_check.size != 1

sig_check = sigs_check.first
c427bfc7 Marc Dequenes
if sig_check.status == 0
logger.info "Mail content was properly signed by key #{sig_check.fingerprint}"
user = Person.find_by_fingerprint(sig_check.fingerprint)
if user.nil?
logger.info "Mail is from an unknown person"
7193ea94 Marc Dequenes
order[:msg] = "unknown user"
c427bfc7 Marc Dequenes
else
logger.info "Mail is from user #{user.uid} (#{user.cn})"

signed_content = pgp_signed_part()
if signed_content.multipart?
if signed_content.parts[0].content_type == "text/plain"
command_txt = signed_content.parts[0].body
refs = signed_content.parts.collect{|p| p.dup }
end
else
command_txt = signed_content.body if signed_content.content_type == "text/plain"
refs = []
end

if command_txt
commands = []
command_txt.each_line do |line|
line.chomp!
sline = line.strip
# skip empty lines and comments
next if sline == "" or sline[0, 1] == "#"
# stop processing when detecting message signature
break if line == "-- "

commands << sline
end

7193ea94 Marc Dequenes
order = {:ok => true, :user => user, :commands => commands, :refs => refs}
c427bfc7 Marc Dequenes
else
logger.info "Mail does not contain a proper MIME part for commands"
end
end
else
logger.info "Mail content tampered or badly signed: " + sig_check.to_s
7193ea94 Marc Dequenes
return nil
c427bfc7 Marc Dequenes
end

7193ea94 Marc Dequenes
order.to_ostruct
c427bfc7 Marc Dequenes
end
275e20ec Marc Dequenes
960c259e Marc Dequenes
def parse_encrypted
order = {:ok => false, :msg => "mail not formatted correctly"}

catch :notforme do
begin
# block is not passed to delegate (limitation ?)
09b32d70 Marc Dequenes
clear_message = @mail.pgp_decrypt do |uid_hint, passphrase_info, prev_was_bad|
960c259e Marc Dequenes
logger.info "Mail crypted for #{uid_hint}"

# check if requesting passphrase for the expected key
key_id = passphrase_info.split(" ")[1]
throw :notforme if key_id != @config.mail.key_id[-(key_id.size)..-1]

# sending key
@config.mail.key_passphrase
end

# create a fake mail and chain parsing operations
clear_mail = self.class.new(clear_message)
return clear_mail.parse
rescue GPGME::Error, NotImplementedError => e
raise CyberError.new(:unrecoverable, "protocol/mail", e.message)
end
end

order.to_ostruct
end
c427bfc7 Marc Dequenes
end
end